FreeBitco.in Appears Hacked - Monthly Prize Money Stolen From Multiple Users

[ixi1234]

OK, so that people no longer have doubts about how the address is being changed when withdrawing funds. At the end of the video, watch carefully how my output address was changed!!! I hope no one else will say that we are deceiving you and the site is not hacked!
https://dropmefiles.com/56V5d
https://ibb.co/PtqN3Mw
https://ibb.co/cgCnxQ1

Update!!:
After I posted the video with the substitution of the withdrawal address, an hour later I tried to withdraw funds again and surprisingly my address did not change and the withdrawal went to the correct address! Is it a coincidence??? Or are hackers monitoring this forum topic?

This user too has had the email about withdrawing his money to his own freebitco.in deposit address (check the two image links)!! That's two people that have had ~this problem report this strange behaviour.

The problems are:

• 1. That shouldn't happen, lol
• 2. The deposit/withdrawl are made on-chain but aren't credited!

I strongly suspect BayAreaCoins's unkown address (15C8FetAcZ7fkdgf2FAHamwqX4EUE1zhgP) is actually one of his own freebitco.in old deposit address. The address doesn't seem to have been used by OP's before, but still, very worth checking! No matter how "high ranking" OP is, checking that the "attackers" address is actually an old deposit address is very non-obvious.

https://www.dropbox.com/scl/fi/rsu1hq8tgj810e2p8bqj7/video_20240505_093225_edit.mp4?rlkey=me946bfe2utlhz2vtc3yqjgg7&st=ywer9mzb&dl=0

I recorded from the screen of my smartphone how the hackers replaced the output address with their own (at the end of the video you can see how the address changed to the address of the attackers). This happened automatically after clicking the withdraw button

[Tercio]

https://www.dropbox.com/scl/fi/rsu1hq8tgj810e2p8bqj7/video_20240505_093225_edit.mp4?rlkey=me946bfe2utlhz2vtc3yqjgg7&st=ywer9mzb&dl=0

I recorded from the screen of my smartphone how the hackers replaced the output address with their own (at the end of the video you can see how the address changed to the address of the attackers). This happened automatically after clicking the withdraw button

Yes! The address shown in the last frames of the video is 15xgSi6AuH2qdni23EoofPBnoHz... which matches the 15xgSi6AuH2qdni23EoofPBnoHzy[FpzuU5] from your other picture https://ibb.co/cgCnxQ1 which is a screenshot showing your freebitco.in deposit address where you can deposit bitcoins to gamble them on the website (and not where the money would be withdrawn to)!

So the money isn't lost, nobody took it, the system "just" fucked up and didn't credit the weird on-chain transaction to your freebitco.in account wallet.

[ixi1234]

https://www.dropbox.com/scl/fi/rsu1hq8tgj810e2p8bqj7/video_20240505_093225_edit.mp4?rlkey=me946bfe2utlhz2vtc3yqjgg7&st=ywer9mzb&dl=0

I recorded from the screen of my smartphone how the hackers replaced the output address with their own (at the end of the video you can see how the address changed to the address of the attackers). This happened automatically after clicking the withdraw button

Yes! The address shown in the last frames of the video is 15xgSi6AuH2qdni23EoofPBnoHz... which matches the 15xgSi6AuH2qdni23EoofPBnoHzy[FpzuU5] from your other picture https://ibb.co/cgCnxQ1 which is a screenshot showing your freebitco.in deposit address where you can deposit bitcoins to gamble them on the website (and not where the money would be withdrawn to)!

So the money isn't lost, nobody took it, the system "just" fucked up and didn't credit the weird on-chain transaction to your freebitco.in account wallet.

This was precisely a hacker attack, since this address no longer appears in the list of my deposit addresses, it has disappeared. It disappeared on May 5th, after I posted this video!

Even if this is an internal error with freebitco, my money is lost in any case, as support is not going to answer user problems

[Tercio]

This was precisely a hacker attack, since this address no longer appears in the list of my deposit addresses, it has disappeared. It disappeared on May 5th, after I posted this video!

Are you sure? Can you check again even under "OLD DEPOSIT ADDRESSES" that the address 15xgSi6AuH2qdni23EoofPBnoHzyFpzuU5 doesn't show? Can you post an image?

[ixi1234]

This was precisely a hacker attack, since this address no longer appears in the list of my deposit addresses, it has disappeared. It disappeared on May 5th, after I posted this video!

Are you sure? Can you check again even under "OLD DEPOSIT ADDRESSES" that the address 15xgSi6AuH2qdni23EoofPBnoHzyFpzuU5 doesn't show? Can you post an image?

Of course, I'm sure. https://ibb.co/KN4j5gJ

[Tercio]

Of course, I'm sure. https://ibb.co/KN4j5gJ

Don't think of me as a dickhead, I am just trying to help, if what you say is true then it's very damning of hacking if not an inside job!
But... before moving from the headspace of "it was a bug, they need to fix it " to "*grabs pitchforks* it was an inside job, burn it to the ground! " (I jut find it less likely on priors), I would like to have more. Can you show everyone the picture of the current deposit address and all of the previous addresses?

Sorry again to doubt you, but I am mentally deep in this hole rn, and I would like to verify all that is verifiable.

[ixi1234]

Of course, I'm sure. https://ibb.co/KN4j5gJ

Don't think of me as a dickhead, I am just trying to help, if what you say is true then it's very damning of hacking if not an inside job!
But... before moving from the headspace of "it was a bug, they need to fix it " to "*grabs pitchforks* it was an inside job, burn it to the ground! " (I jut find it less likely on priors), I would like to have more. Can you show everyone the picture of the current deposit address and all of the previous addresses?

Sorry again to doubt you, but I am mentally deep in this hole rn, and I would like to verify all that is verifiable.

https://ibb.co/ZNBZW9b

[Tercio]

https://ibb.co/ZNBZW9b

*grabs pitchfork*

[GxSTxV]

I see there  have been a lot of issues with Freebitco.in lately, and the team has yet to provide any answers. While I haven't followed all the stories, it seems that many users are experiencing much hacking incidents and issues about receiving emails, withdrawal trials that they didn’t make with their accounts, funds are stolen or orders are not processed due to the 2nd otp. Personally, I haven't encountered any of these issues on my account, but what is concerning for me more is that the team is not responding to the situation yet knowing Freebitco.in is one of the best and secure faucets and casinos I have ever experienced.

We are missing a lot of details about what exactly is going on. Should we take any precautions with our accounts or not even login inside?

[Get-Paid.com]

The writing was on the wall and we posted about it 3 months ago, and yet, there are still bad-sses who attack us for being responsive to users and running 20 legitimate faucets for over 7 years (we started in 2017 and freebitco.in in 2013).

So let's say it again - the writing WAS ON THE WALL !

https://bitcointalk.org/index.php?topic=5487189.0

Hopefully someone would finally listen. It's not about just fixing a code, it's about getting control of your faucet.

They can't do it in the current structure, it's impossible.

The sign of them of collapsing is now getting clearer. Their lack of personnel despite they have lots of users using their service is one factor why the casino management will collapse just like this.

I’m not a faucet user anymore so I can’t relate to the details about their faucet but one thing is for sure that this casino never prepared for this kind of issue. Worst is the founder mismanaged the Bitcoin funds that result to this unimproved service even they are existing for a long time.

If the OP of this thread didn't happen to check if the address is one of their deposit (and honestly, why would he?) it might be worth checking it out. If the deposit was indeed made to his own freebico.in wallet this indicate a fuck up of the automatic system they employ, and not fraud/scam/hack.

Again the OP is high rank and known for being involved on many business. I doubt that he will be overlooked the address that he used in the past.

It's truly sad to see this, and you can see in our own thread people are attacking us for expressing these views 3 months ago warning everyone:

https://bitcointalk.org/index.php?topic=5487189.0

Truly nuts how some people think!

We don't want them to fail. We have over 120k referrals with them (like our Youtube video shows).

We just share our own experience as faucet owners, 20 faucets, since 2017. We also posted a blog post about this here in February 2024:

https://freebitcoin.io/articles/changes-to-our-faucets-from-feb-2024

Use webmachine archive to verify, the text written here was posted then, it wasn't changed or altered - this was unfortunately a prediction of a black swan event. Why?

Because we saw what happens to many faucets now. Hackers use anything they can to drain them and drain user accounts. You need to communicate this to your users and you have to show you are hands on on the problem. Otherwise, this is only the beginning.

They can still get out of this, all they need to do is to finally change their business model and apply common sense practices and things will start flying again. Right now it seems like they choose the same approach they had with their "sister" site:

https://freebitcoin.io/articles/what-happened-to-free-doge
(This article is from 2020)

[Cacenn@outlook.com]

we are nearly 2,5 months further and this Samuel Das aka wetsuit still haven't said or done anything to compensate the problems that he is personal responsible for, nor replied any of us.

We (our group of high rollers) losses 21300€ by this scam/hack.

And the scam is even bigger. Funtokens slowly will be worth nothing and Samuel Das aka wetsuit or better say the CEO of freebitco.in and Funtokens, are fucking our asses.

Let me tell you this, we have spended more then 1 million US on his website, a contract killer or hacker will cost us less.

Let that be the final warning for you!

[ixi1234]

Dear BTC Talk Community,

We have conducted a thorough review and found no issues on the website. It is possible that specific users may have encountered problems due to viruses or plugins they installed, which are beyond our control.

TheQuin is currently focusing on fraud prevention across our multiple properties and is no longer active on the forum. Customer support will now be handled by a professional team.

Best regards,
The FreeBitco.in Team

Well, gentlemen who have suffered, this answer is simply ridiculous, and just an excuse and unwillingness to do something about our problem. We were deceived (robbed) and they are not going to do anything about it. Support is a useless thing freebitco.

[codergeek]

We have conducted a thorough review and found no issues on the website. It is possible that specific users may have encountered problems due to viruses or plugins they installed, which are beyond our control.

Isn't it too much coincidence that many high rollers who won the wagering contest (and only them) had their accounts legitimacy compromised by a malicious script which was deflecting their funds to external unknown wallets?

If the issue with malicious script were a generic issue faced by random users, then we could think that it had something to do with external plugins installed by the users themselves (probably plugins related to gambling bots).

But since only specific whales were targeted, it really seems to have been a more elaborated attack against determined platform's users, who the hackers knew to be more profitable to steal from, instead of focusing on random accounts from micro earners containing dust of satoshis, for an example.

I have 2 remarks:

1. The deposit and withdraw attacks were not just targeted against (recent) high rollers. I have not wagered on freebitco.in in months, and my account was still affected. Fortunately, I did not lose any bitcoin, because I did not try to deposit or withdraw when the attacks were taking place; but for a period of ~24 hours my deposit address switched to some unknown address. I have had the same deposit address for years and have not changed it recently, and so I knew immediately that something fishy was going on. After about a day, my deposit address changed back to my normal address.

2. This was absolutely not caused by "viruses or plugins they installed". I have 3 different devices that I use to log in to this site, and my deposit address was switched on every single device. Are you really going to argue that I had the exact same virus on all 3 devices?

I have ~100 messages on this forum, and in nearly all of them I have spoken positively about freebitco.in (they gave me a lambo!). I have to be critical here, though. Blaming users for these recent issues is not cool.

soslex, Lambo winner, also targeted by the hack.

[nutildah]

@BayAreaCoins and everyone else affected that hasn't already done so, you might try reaching out to the new CS representative about what happened:

Hello BTC Talk Community,

I am the newest member of the Free Bitco.in Customer Support team and am excited to join this community.
I'm here to assist you with any questions or issues you may have.  My goal is to provide you helpful support and guidance to ensure you all have the best possible experience.

As I get fully acquainted and set up, I appreciate your patience.
I look forward to engaging with you, contributing to this forum and enhancing your experience with the site.

Please feel free to leave any feedback you may have, your input is greatly appreciated. It will be taken onboard and help in providing the best possible product and service.

Best Regards,

Customer Support Team
FreeBitco.in

They are confirmed to be an actual employee of freebitco.in.

I'm wondering if anybody who commented in this thread is experiencing a "back to normal" situation at this website, or has been compensated for their losses.

[mindrust]

Fun tokens was the worst idea they came up with. I said it when they first introduced it: “This casino will become freefuntokens soon” TheQuin didn’t agree with me. I wanted to believe him and part of me did.

The casino didn’t really become freefuntokens but what I really meant was “the casino will go shit soon” and it looks like it did.

I hate it when an online bitcoin casino issues its own currency. Just-dice also did it and issued CLAMs and nowadays nobody uses it anymore.

Issuing your own casino tokens is a sign of bankruptcy to me.

They should have kept freedogecoin alive.

[ixi1234]

Hello, yesterday I tried to contact a new member of technical support, in the main discussion thread, since I don’t have the opportunity to write to him in direct messenger. At this moment I have not received a response. Compensation has also not been received until now.

[nutildah]

Hello, yesterday I tried to contact a new member of technical support, in the main discussion thread, since I don’t have the opportunity to write to him in direct messenger. At this moment I have not received a response. Compensation has also not been received until now.

Now you're a Jr. Member, so perhaps you can message them now.

I know the events are being blamed on the user, but there seems to be much more to it than that, like perhaps some kind of hacker (whether an insider or outsider, we don't know) was able to insert some malicious code into the website & cause people to send coins to addresses that weren't theirs.

[blackmtl308]

There is a new support team at Freebitco.in, after 2 months I received a response by email.

Freebitco.in Support Team User CSFBC, is now accepting messages from Newbies as well.

Even though they didn't respond to me, what I actually sent in the message, basically, the stolen money, as happened to most of you, at least there is someone who is taking care of it.

I will continue with this, until I receive financial compensation for the loss.